v4: Users can navigate to /login URL whilst already logged in

[romeenrg]

Version

v4

Severity

Low

Suggested Priority

Low

Observed Behaviour

Users can navigate to /login route by URL whilst already logged in, and can log into a different account without manually logging out.

Expected Behaviour

/login page should not be accessible for a user that is already logged in. 404 error page should be presented instead or redirect to /home

Reproduction Steps

1. Run app
2. Navigate to http://127.0.0.1:5001/login
3. Sign into any account (on v4 use: Username = username Password = password )
4. Navigate to http://127.0.0.1:5001/login using URL bar

[PaulNGilson]

Interesting! Agreed that it should redirect, I think /home makes most sense rather than an error (or some other warning page telling the user they're already logged in).

I wonder what the industry standard approach to this is?